startlink.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:fa:1b:47:73:f4:19:50:0f:a6:1e:48:18:ef:d5:b6:4b:21 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=startlink.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fa:1b:47:73:f4:19:50:0f:a6:1e:48:18:ef:d5:b6:4b:21
Serial Number (int): 346443709686295114493678917525935987510049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:ec:c4:34:d1:c5:1f:99:7d:09:a7:07:9c:bf:1a:df:20:b0:a4:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:14:9a:cb:0d:3d:63:0a:ef:12:6a:60:7a:ab:41:8a:bf:89:8b:73
Fingerprint (sha256): a0:01:e0:0e:a7:d1:b1:bc:69:98:e5:67:34:67:83:81:67:65:5d:35:45:11:22:b0:41:f3:26:ab:74:e5:1d:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate startlink.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for startlink.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

startlink.com.br
www.startlink.com.br

Other certificates including the domain name startlink.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for startlink.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyRT40bStYnmbi1vpG2ao
Nl45xEk2jrgbUtCIuNJARO48spHP71KPZnb+kTLlVxMm3Z4CpSziaXAv5//S7Ktb
zGdzfBbNbn6nv2FE1m25ltVxmF8hTGb2VrBQzmolpoSR9TCd+3Q79GT/pM5W6uIf
cig8uFe4OM30mwFfOoQGDYhHDp6EebnAunyrSsTcHulaH9Llg6B+dsX6WLdTIggp
tjb9LwJYdNFaofQ1XF6O4YMDLx+gJvkQKvxZfZlnANQFUljS1x6SL3CfHwqQrXYg
rHylUoUpFgqFCB1I1vW602a/kIlr3BJvSx325se6stPlgkCB9Zz1bWFsyEXgGYUg
EgQdfRxtuRWeLjC7o4eBaNTI1g2B4Y7n8iD25pnJhj0Bu+tnk+NipeSx0fbBfE1w
9XTrbdREnWWuGQHdO40bpjVFkvWzNvGaQvlJmgKln/oirrv7561skC3jX+SLzuka
3CiI0qPPhTIxw5WV4gWVP36iemraZPRPT/GkCGN3x8KC9pXAA1GfLSC4yowQ8te6
9SWcB2sNEMUiTx4nx/2dGm4RDkTEgUjvhdm35pkO+IaXsGk9ZrCo2sU8+hXDvp49
n1LU8y+hYKWtX135r7PgEve0uWJ6ZZSIuN5TlN5aJTEbeuq9KZG17o96VRH6QIn1
cBqAUvzU1jYjGa6GSmjYszkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346443709686295114493678917525935987510049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 11:07:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 11:07:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'startlink.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820342668964331979896065688327169828783112905644003991964539213516221547739765906519969633444984497467701155057690779112985021754277541939678370233197465508093437873136226120098718980796174479690933714085018729142818798046530561756638049293287885595145104122023246011373593147941085709638878152761252688056971160432020672361053028597643910606729598927305978862047688956569078074883239894968110821349490872980402471107853046543181854574495938567941807312123499617522880876106598830121791704059846126333269318653727183337287154617240072306353150279973652974583444776433690387807600322312364842146884886288882177614733537038401590023135317449759781010520467298781015330017816767454369246432535118953445817000153173874274519633935674261783188239880682394097802150714213300264671713302016729507727163706326914025732233890512137934298517792060974789523979492004986085357753736127313201532614122879571322740452183375060237915672757805970871356859390343630358701226700191516327466584750221891973177759914811339179649563949529141014911988043768507478729361812969401814365808535234571980115342776682309129000828643546015291128692945354450790051913422995568813255144817903201952129406753489055854789870053960666386278107205785593429258061525817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9decc434d1c51f997d09a7079cbf1adf20b0a4b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startlink.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startlink.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd8d912b50000040300473045022100a58c07f78aaa489e50dfc8213827b518eb1cf7172ca602dbf53eb00a7112b7fe0220107ce4aec9b6e2224808379da7405ba06f7f978094f49c8c498ea66dade2e0f900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fd8d912ef000004030046304402203c1bfbe368989c677278f6362be0af27d1ae1bb968d4dbcb7dd1f8b37ce72d0302204404540a0b3f17e03ae44d6b6999bddc1208104345e2a434ca13bd8937e1c4b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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